Even if a fraudster obtains your password through a phishing page, two-factor authentication (2FA) prevents them from accessing your account.

How to enable 2FA on Facebook

  • Settings → Security and Login
  • Click "Two-Factor Authentication"
  • Choose an authentication app (recommended) or SMS
  • Save your recovery codes
💡 Prefer an authentication app (Google Authenticator, Authy) over SMS, which can be intercepted via SIM swapping attacks.